method-override

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less transparent; this is a transparency gap rather than evidence of compromise.

Dependency profilecaution

The package has four runtime dependencies, a moderate footprint for middleware, though older releases can increase compatibility maintenance concerns.

Release historycaution

The package has 23 releases since 2014, but its latest registry release was over seven years ago and there were no releases in the last 12 months, creating a meaningful freshness concern.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which indicates limited recent development capacity despite the repository remaining available.

Repo issue activitycaution

Recent issue activity is quiet, while one issue and 11 pull requests remain open; this is a modest maintenance concern but not evidence of abandonment by itself.